Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61112.roa
File: AS61112.roa (raw, json)
Hash identifier: BPMIUJPHAwRu+diuruuZK/+WsJwU6C7GDP8yVncKJRM=
Subject key identifier: 8D:E4:5B:35:DD:FE:4A:A5:7B:C4:1A:0D:8A:25:F5:11:82:7C:B5:DD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 091E8AA0B64B50345F654EFE13F6B9640BD6E0F2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61112.roa
Signing time: Fri 21 Aug 2026 14:13:10 +0000
ROA not before: Fri 21 Aug 2026 14:08:10 +0000
ROA not after: Fri 20 Aug 2027 14:13:10 +0000
asID: 61112
IP address blocks: 140.233.172.0/24 maxlen: 24
168.222.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1e:8a:a0:b6:4b:50:34:5f:65:4e:fe:13:f6:b9:64:0b:d6:e0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 21 14:08:10 2026 GMT
Not After : Aug 20 14:13:10 2027 GMT
Subject: CN=8DE45B35DDFE4AA57BC41A0D8A25F511827CB5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:21:61:93:55:eb:44:a9:2a:e1:21:3c:dc:
60:ef:8e:01:ff:e5:f3:b3:93:12:b9:06:95:7b:c7:
56:97:74:eb:a1:f8:07:f4:1a:3a:0c:ae:32:52:62:
86:df:a0:89:f7:48:52:bc:7a:7e:5d:a2:c0:1d:d6:
3f:60:bc:b1:c9:f3:e1:0e:09:b9:57:bd:98:eb:32:
1d:ac:c4:3d:9b:1f:1e:00:fe:ed:e1:1a:40:80:33:
dd:e0:89:ba:98:71:c3:78:e6:6f:b1:1c:3e:db:79:
fb:4f:b7:0e:22:dc:08:f0:72:97:5c:aa:b1:f1:2b:
1f:46:7e:90:61:d6:37:8a:c2:65:d9:cc:07:9d:4f:
43:61:2b:00:c0:5b:de:00:e7:35:58:14:d6:05:be:
f4:96:0e:62:e5:f4:95:f8:36:8f:d8:4b:db:5a:60:
df:c8:c3:73:ff:bd:4a:46:e1:8e:51:9d:5a:25:42:
43:90:23:25:7d:f3:a9:e5:94:45:27:77:c8:2d:82:
4a:dd:11:da:56:52:3c:63:9d:15:3f:af:29:40:68:
48:17:a6:97:ba:85:0b:6f:f7:fb:eb:a9:b2:ed:67:
46:e3:c7:6a:c9:5f:7a:56:b0:e3:25:2a:49:85:26:
6e:9f:9b:e6:6b:18:ba:a2:aa:6a:61:42:f0:e7:9a:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E4:5B:35:DD:FE:4A:A5:7B:C4:1A:0D:8A:25:F5:11:82:7C:B5:DD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61112.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.172.0/24
168.222.9.0/24
Signature Algorithm: sha256WithRSAEncryption
79:10:cb:ea:88:3c:44:9c:a3:ee:87:8b:8d:73:79:db:7d:61:
5a:a1:9e:11:ed:d9:ea:6b:1d:d9:f3:bc:ee:b6:e0:01:a4:86:
4c:aa:13:b3:49:61:92:83:fe:0f:89:bc:f0:81:c5:c1:a7:ed:
39:81:5f:d5:d9:09:20:c0:bc:4c:7f:e4:e0:1b:68:0f:d1:06:
f3:8f:41:d9:11:f4:07:09:33:c8:5c:0c:dc:f6:45:1a:14:a4:
a0:c8:7c:06:04:ba:8a:ef:2b:cc:a4:26:45:54:81:2d:7c:25:
bb:f2:a0:f9:6e:09:2a:83:d9:3f:62:d5:81:f7:fa:a0:ca:e3:
17:57:55:79:75:78:25:37:81:b9:c8:87:8d:80:b3:30:a2:ae:
74:1f:4e:12:46:f8:a7:7d:cb:84:1c:38:8a:a4:b0:ba:8e:20:
41:79:2b:5f:0c:b4:6e:73:99:98:5a:e0:33:b1:db:e9:1c:e3:
88:73:5a:05:2c:97:73:dd:b6:c2:43:e6:62:74:90:e9:55:86:
0d:b2:2e:c3:16:0b:36:c5:33:cc:3b:a6:f0:89:dd:1f:68:6a:
37:0f:b8:06:69:56:55:bd:b1:fa:49:57:e8:f5:b3:e0:f3:5f:
6a:17:70:b3:4d:b6:08:77:2c:47:22:17:20:7d:26:16:c7:9e:
86:16:1a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:32 2026 by rpki-client